首页
社区
课程
招聘
[转帖]Quick Unpack v0.4 final
发表于: 2009-6-5 00:35 2623

[转帖]Quick Unpack v0.4 final

2009-6-5 00:35
2623
Quick Unpack v0.4 final

From CRACKL@B

I no test it.

Quick Unpack v0.4 final Readme
==============================

Description
-----------
The program is for the really quick unpacking of the easy packers (UPX, AsPack, PE Diminisher, PE-PACK, etc). Has the small size and is pretty fast.

Quick Unpack can unpack:
ASPack 2.12
UPX 1.xx
FSG 1.33
PE Diminisher 0.1
PECompact 1.84
...

Usage
-----
You have to specify the address (in hex) for Quick Unpack to stop on. When the program stops, it will do the dump. It can be either OEP or any other VALID EIP, which is executed by a program.
You can also press the ">" button and Quick Unpack will try to find the OEP using external modules. If the attempt is successful, then you'll see the obtained OEP in the "OEP" field. If attempt has failed, probably the file is a non-executable one or due to some other reason.

Quick Unpack will try to resolve IAT (NT-systems ONLY!) when "Rebuild import" is checked.
If the unpacked file doesn't run then try unpacking the file without optimizing the filesize ("Optimize file" option).

Limitations
-----------
IAT recovery is working under Win2000/XP/2003 ONLY.

Licensing
---------
Sources that were used while writing Quick Unpack:
e32unpack sources by bedrock
GenOEP.dll by Snaker
ImpREC.dll by MackT
NDump.dll by NEOx [uinC]
RebPE32.dll by NEOx [uinC]

All the modules have been taken from the open resources.

History
-------

v0.4 final.
[+] Added new OEP-finding system for UPX, ASPack and FSG.
[!] Small bugz are fixed

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!

上传的附件:
收藏
免费 1
支持
分享
最新回复 (7)
雪    币: 222
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
好像2.1的版本早就有了吧
http://applife.net/2008/04/quickunpack/
2009-6-5 08:29
0
雪    币: 1450
活跃值: (35)
能力值: (RANK:680 )
在线值:
发帖
回帖
粉丝
3
有时间用一用, 谢谢LZ.
2009-6-5 12:13
0
雪    币: 333
活跃值: (116)
能力值: ( LV9,RANK:570 )
在线值:
发帖
回帖
粉丝
4
Very Thx, I Like It!
2009-6-5 12:16
0
雪    币: 258
活跃值: (31)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
汉化了一下,方便使用
上传的附件:
2009-6-5 18:04
0
雪    币: 370
活跃值: (15)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
6
没人测试?都只收藏
2009-6-5 21:07
0
雪    币: 4902
活跃值: (135)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
7
虽然很少用这个
但还是谢谢分享!
2009-6-5 21:36
0
雪    币: 318
活跃值: (158)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
8
收藏以务不时之需,谢谢楼主
2009-6-5 23:35
0
游客
登录 | 注册 方可回帖
返回
//